Privacy Policy
Effective
Who runs Kanvan
Kanvan is a personal, invite-only kanban run by the Kanvan administrator. It is a hobby project, not a company. Only people whose email address has been put on the allow-list can create an account. Questions about this policy or about your data are welcome. Write to support@seastian.com.
What we store
Everything Kanvan stores is there to make the app work. Specifically:
- Your account: your name, your email address, and, when you sign in with Google, the id Google assigns to your account. A password hash is stored only on deployments where email/password sign-in is enabled.
- Your work: boards, columns, cards, card notes including any images you paste or upload into them, tags, priority levels, recurrence templates, your display settings, and which boards you are a member of and in what role.
- An activity log: every change to a board is recorded with who made it, when, and the state before and after. The log is what makes restore and revert possible, so entries are never purged while the board exists.
Cookies
Kanvan sets two cookies and nothing else:
- a session cookie that keeps you signed in;
- a theme cookie that remembers your light or dark preference.
There are no analytics, no advertising, and no tracking pixels.
Signing in with Google
When you sign in with Google, Google tells us your name, your email address and your Google profile id. That is all we ask for and all we receive. We do not read your mail, calendar, contacts or files, and we never post anything to your Google account.
Where your data lives
Kanvan runs on Cloudflare Workers. The database is Cloudflare D1, located in the Western Europe region, and images are stored in Cloudflare R2. Pages and images are served through Cloudflare's network. Cloudflare is the only third party that handles your data, and it does so as our hosting provider.
Who can see your data
- Members of a board can see everything on that board, including the activity log. Anyone who is not a member cannot tell the board exists.
- An administrator can see every account and usage statistics, and can sign in as any user (impersonation) to help with a problem. Impersonation is recorded and is shown as a banner for the whole time it runs.
- We do not sell your data, and we do not share it with anyone beyond the hosting provider named above.
How long we keep it
Your data is kept for as long as your account exists. On request, the account and its boards, cards, notes, images and activity entries are removed. Write to support@seastian.com. Until then, an image you remove from a note stays in storage; it is not deleted automatically.
Your rights
You can ask to see the data we hold about you, to have it corrected, to receive a copy of it, or to have it deleted. Write to support@seastian.com.
Changes to this policy
If this policy changes, the new version appears on this page with a new effective date. There is no other notice.